The AD RMS installation could not determine the certificate hierarchy. If the AD RMS service connection point (SCP) you need ...

The AD RMS installation could not determine the certificate hierarchy. If the AD RMS service connection point (SCP) you need to use is registered in Active Directory but is not valid, revise it to make it valid, or create a new SCP, and install AD RMS again.